I think that with the upgrade to PD15, my SIP settings (via csrutil command run from recovery partition) are no longer being preserved in my test VM. This is what I'm seeing: 1 - Check "Select boot device on startup" 2 - Boot to recovery partition 3 - "Utilities | Terminal" 4 - "csrutil disable" 5 - "shutdown -r now" 6 - Boot into standard partition (don't go into the boot selection menu) 7 - "csrutil status" -> Shows disabled. This is the "working" scenario. However, if I then do the following: 1 - Shut down VM 2 - Uncheck "Select boot device on startup" 3 - Start VM (boots into standard partition) 4 - "csrutil status" -> Shows enabled. I think that changing the "Select boot device on startup" option makes some kind of change to the NVRAM or something that causes my previous settings to be lost. This used to work on PD14. Any ideas of how I can get that option to "stick" (This is for a VM that I use for testing driver development - which is why I need SIP disabled...it is a pain to have to boot to the recovery partition to reenable it every time I need to use it).